diff --git a/conquest.nimble b/conquest.nimble
index 4b5988e..876024e 100644
--- a/conquest.nimble
+++ b/conquest.nimble
@@ -20,7 +20,6 @@ task client, "Build conquest client binary":
requires "nim >= 2.2.4"
-requires "parsetoml >= 0.7.2"
requires "nimcrypto >= 0.6.4"
requires "tiny_sqlite >= 0.2.0"
requires "winim >= 3.9.4"
diff --git a/data/profile.toml b/data/profile.toml
index baf6311..5431611 100644
--- a/data/profile.toml
+++ b/data/profile.toml
@@ -29,10 +29,10 @@ endpoints = [
# Metadata can be stored in a Header (e.g. JWT Token, Session Cookie), URI parameter or request body
# Encoding is only applied to the payload and not the prepended or appended strings
[http-get.agent.heartbeat]
-# placement = { type = "header", name = "Authorization" }
-# encoding = { type = "base64", url-safe = true }
-# prefix = "Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9."
-# suffix = ".######################################-####"
+placement = { type = "header", name = "Authorization" }
+encoding = { type = "base64", url-safe = true }
+prefix = "Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9."
+suffix = ".######################################-####"
# Example: PHP session cookie
# placement = { type = "header", name = "Cookie" }
@@ -45,8 +45,8 @@ endpoints = [
# encoding = { type = "hex" }
# Example: Raw data in GET request body
-placement = { type = "body" }
-encoding = { type = "rot", key = 2 }
+# placement = { type = "body" }
+# encoding = { "none" }
# Defines arbitrary URI parameters that are added to the request
[http-get.agent.parameters]
diff --git a/data/youtube.toml b/data/youtube.toml
index d475b4d..6e2993d 100644
--- a/data/youtube.toml
+++ b/data/youtube.toml
@@ -36,14 +36,14 @@ v = "###########"
# Defines arbitrary headers that are added by the agent when performing a HTTP GET request
[http-get.agent.headers]
Host = "www.youtube.com"
-Sec-Ch-Ua = "'Not.A/Brand';v='99', 'Chromium';v='136'"
+Sec-Ch-Ua = "\"Not.A/Brand\";v=\"99\", \"Chromium\";v=\"136\""
Sec-Ch-Ua-Mobile = "?0"
-Sec-Ch-Ua-Full-Version = "''"
-Sec-Ch-Ua-Arch = "''"
-Sec-Ch-Ua-Platform = "'Windows'"
-Sec-Ch-Ua-Platform-Version = "''"
-Sec-Ch-Ua-Model = "''"
-Sec-Ch-Ua-Bitness = "''"
+Sec-Ch-Ua-Full-Version = "\"\""
+Sec-Ch-Ua-Arch = "\"\""
+Sec-Ch-Ua-Platform = "\"Windows\""
+Sec-Ch-Ua-Platform-Version = "\"\""
+Sec-Ch-Ua-Model = "\"\""
+Sec-Ch-Ua-Bitness = "\"\""
Sec-Ch-Ua-Wow64 = "?0"
Accept-Language = [
"en-US,en;q=0.9",
@@ -58,7 +58,7 @@ Sec-Fetch-User = "?1"
Sec-Fetch-Dest = "document"
Priority = "u=0, i"
-# Defines arbitrary headers that are added to the server's response
+# Defines arbitrary headers that are added to the server\"s response
[http-get.server.headers]
Content-Type = "text/html; charset=utf-8"
X-Content-Type-Options = "nosniff"
@@ -67,19 +67,19 @@ Pragma = "no-cache"
Expires = "Mon, 01 Jan 1990 00:00:00 GMT"
Strict-Transport-Security = "max-age=31536000"
X-Frame-Options = "SAMEORIGIN"
-Content-Security-Policy = "require-trusted-types-for 'script'"
+Content-Security-Policy = "require-trusted-types-for \"script\""
Server = "ESF"
X-Xss-Protection = "0"
-P3p = "CP='This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=de for more info.'"
-Alt-Svc = "h3=':443'; ma=2592000,h3-29=':443'; ma=2592000"
+P3p = "CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=de for more info.\""
+Alt-Svc = "h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000"
Set-Cookie = "__Secure-YEC=##############################################################################; Domain=.youtube.com; Expires=Mon, 07-Dec-2026 11:39:54 GMT; Path=/; Secure; HttpOnly; SameSite=lax"
-# Defines how the server's response to the task retrieval request is rendered
+# Defines how the server"s response to the task retrieval request is rendered
[http-get.server.output]
placement = { type = "body" }
encoding = { type = "base64" }
-prefix = "